NOTICE ON THE PROCESSING OF PERSONAL DATA

Pursuant to articles of Regulation (EU) 2016/679 (hereinafter "GDPR 2016/679"), which contains provisions for the protection of natural persons and other subjects regarding the processing of personal data, we wish to inform you that any personal data you provide will be processed in compliance with the above-mentioned regulations and applicable U.S. laws (including, where relevant, the U.S. Privacy Act of 1974, as amended, and state-specific privacy regulations such as the California Consumer Privacy Act (CCPA), if applicable). Where intellectual property materials are implicated, we also abide by the U.S. Digital Millennium Copyright Act (DMCA) for hosting and takedown procedures.

The controller of the data you provide is Artnition LLC - 21750 Hardy Oak Blvd Ste 104 #396876 , San Antonio TX, USA 78258.

Your personal data are required for:

• The performance of the assigned mandate or contract,
• Compliance with legal obligations,
• Marketing activities,
• Any profiling to assess customer satisfaction.

All processing is conducted per Article 5(1) of Regulation (EU) 2016/679 and relevant U.S. data protection laws, observing principles of lawfulness, fairness, transparency, minimization, proportion, data retention limitation, and security.

Providing your personal data is necessary for the above purposes. Any refusal or subsequent withdrawal of consent will render it impossible to carry out these activities.

Processing is carried out both in paper (analog) and in digital (electronic) form, in compliance with Article 32 of GDPR 2016/679 on security measures, by the Data Controller or persons duly authorized under Article 29 of GDPR 2016/679 and under relevant U.S. data privacy standards.

Personal data will be retained for the time strictly necessary to fulfill the intended purposes, and, in any case, for up to ten (10) years, subject to any need for extension due to ongoing legal disputes or statutory obligations.

Under Articles 9 and 10 of Regulation (EU) 2016/679, you may supply "special categories of personal data" (e.g., racial or ethnic origin, political opinions, religious beliefs, health data, and data relating to criminal convictions). These can only be processed with your explicit consent in compliance with GDPR and U.S. legal frameworks.

Collected data will not be disclosed, except for communications strictly necessary to public or private entities to fulfill legal or contractual obligations. Please be aware that data may be transferred outside the EU, including via cloud services, requiring explicit consent where needed. If data are processed or stored in the U.S. or other non-EU jurisdictions, the Data Controller will use recognized mechanisms (e.g., Standard Contractual Clauses, or equivalent) to ensure adequacy of protection under both GDPR and U.S. law.

Eventually automated decision-making processes (including profiling) under Article 22(1) and (4) of Regulation (EU) 2016/679 are employed, exclusively as expressly permitted by law and clearly disclosed beforehand.

Under GDPR (and applicable U.S. privacy laws), you may exercise:

• Access: Confirm whether personal data is processed and request details.
• Rectification/Erasure: Correct inaccurate data or request its deletion.
• Restriction: Limit processing in certain circumstances.
• Data Portability: Receive your data in a machine-readable format or transmit it to another controller without hindrance.
• Objection: Object to processing at any time, especially for direct marketing or automated decision-making.
• Withdrawal of Consent: Revoke consent at any point, without affecting lawfulness of prior processing.
• Complaint: Lodge a complaint with a supervisory authority.

In the United States, additional rights may be available depending on the state of residence (e.g., under the California Consumer Privacy Act).

As we operate under U.S. law, we comply with the Digital Millennium Copyright Act (DMCA) regarding the hosting of user- generated content or other potentially copyrighted material. If you believe that your rights have been infringed or that content violates intellectual property law, please send a DMCA Takedown Notice containing the information required as explained in the Terms and Conditions.